On the anatomy of social engineering attacks-A literature-based dissection of successful attacks

摘要: The aim of this study was to explore the extent which persuasion principles are used in successful social engineering attacks. Seventy-four scenarios were extracted from 4 books on (written by engineers) and analysed. Each scenario split into attack steps, containing single interactions between offender target. For each step, identified. main findings that (a) often attacks, (b) authority (1 6 principles) is considerably more than others, (c) single-principle steps occur multiple-principle ones. engineers identified compared other influences. analysis illustrates how exploit human element security. support view security mechanisms should include not only technical but also countermeasures.